NORDTEK — Privacy policy

This policy explains what personal information NORDTEK collects through this website, why, how long it is kept, who receives it and how you can exercise your rights. It is written to be read before you send a form, and every form on the site links to it.

1. Who is responsible

The website is operated by NORDTEK, Saint-Jean-sur-Richelieu, Québec, Canada (“NORDTEK”, “we”). NORDTEK decides why and how the information described here is processed.

Person in charge of the protection of personal information. Under Québec’s Act respecting the protection of personal information in the private sector (Law 25), NORDTEK has designated a person in charge of the protection of personal information, reachable at privacy@nordtekfilms.com. Write to this person for any question, request or complaint about your personal information.

2. What we collect

We collect only what you enter in a form and what is needed to answer it.

Partner application (distributors). Company, contact name, business email, market covered, the role you apply for, volume range, finishes of interest, and anything you add in the free-text field.
Dealer application. Company, contact name, business email, phone, province and city, type of business, installation bay, years of experience, team size, monthly volume, film brands you work with, finishes of interest, how you heard of us, and your free-text note.
Technical list request. Whether you asked for the technical list under NDA.
Warranty registration (car owners). Sent by the installer who fitted the film: the owner’s name, email and, if given, phone; the car’s make, model, year, colour and VIN; the country where the car is licensed; the finish, panels, roll number and installation date; photographs and video of the car before and after installation.
Warranty claims (car owners). Sent by the owner: the issue, when it was first noticed, where on the car, how the car has been washed, a description, and photographs or video of the issue.
Consent records. Which consents you gave, the version of this policy shown at the time, and when you sent the form.
Technical data. Information your browser sends when a page loads, such as IP address, browser and device type, kept by our hosting provider in server logs for security.

We do not ask for government identification numbers, payment details, health information or precise location. Please do not include them in free-text fields.

3. Why we use it

To read and answer your application, and to follow it up while it is open.
To send you the technical list under NDA, when you ask for it.
To register a warranty, send the owner’s certificate, and review and settle claims under it, including checking a claim against the installation on file.
To send news for installers or partners, only if you ticked the separate, optional box.
To keep the website secure and working.
To meet our legal, accounting and contractual obligations.

We use the information only for these purposes. A new purpose requires your new consent, unless the law allows it without.

4. Consent and legal basis

Each form has two separate boxes, neither ticked in advance: one to let us process your application (required to send it), one for news (optional). You can withdraw either at any time by writing to the person named in section 1; withdrawal does not affect what was done before it.

Applicants in the European Economic Area and the United Kingdom. We process your application to take steps at your request before a possible contract (Article 6(1)(b) GDPR), and news on the basis of your consent (Article 6(1)(a)).

Car owners. Warranty registrations and claims are processed to perform the warranty given to the owner (in the European Economic Area and the United Kingdom, Article 6(1)(b) GDPR). The installer tells the owner at installation, and the certificate letter tells the owner again, where the information goes and where to read this policy. The claim form asks the owner’s agreement to the review of that claim.

Applicants in other countries. Where the law of your country requires prior, express and informed consent, we process your information on the consent you give in the form, for the purposes listed in section 3, and apply the rights that law gives you.

NORDTEK does not sell or rent personal information. We share it only with:

Service providers that host the website, store form submissions, send email and measure site use, bound by written confidentiality and security obligations: Amazon Web Services (website server, database, file storage and outgoing email, in its Montréal region, Canada), Zoho (business email, in Canada) and Cloudflare (network security, page delivery and cookie-free visit counts, through a global network that routes each visit via a data centre near the visitor).
Messaging apps. If you write to us on WhatsApp or Telegram, your messages pass through those services under their own terms and may be processed outside Canada. We use them only to answer you, and our Telegram bot keeps no copy of the text.
The installer and the distributor, for warranties. The installer who fitted the film sees the registration and is told of claims on cars they fitted. Where NORDTEK has a distributor in the owner’s country, the distributor receives the registration and claims to handle them on NORDTEK’s behalf, under a written agreement that limits their use to the warranty.
Authorities, when the law, a court order or a lawful request requires it.

We do not pass applications to distributors or dealers. If a later business relationship requires sharing, we will tell you first.

6. Where it is stored

Form submissions are stored in Canada, in Montréal, Québec. Where information is processed outside Québec or outside your country, we first assess whether it will receive adequate protection, and we use contractual safeguards where the law requires them, including standard contractual clauses for transfers from the European Economic Area.

7. How long we keep it

Applications that do not lead to a business relationship: 24 months after our last exchange, then deleted or anonymised.
Applications that lead to a relationship: for the length of the relationship and as long afterwards as accounting and legal obligations require.
Warranty registrations, photographs and claims: for the warranty term and 2 years after it ends, then deleted or anonymised.
Consent records: as long as the information they cover, plus the period needed to prove consent.
Server logs: 30 days.

8. How we protect it

We use administrative, technical and physical measures suited to the sensitivity of the information: encrypted connections, restricted access for the people who handle applications, and providers held to written security terms. No system is completely secure. If an incident creates a risk of serious injury, we will notify you and the competent authority as the law requires.

9. Your rights

Subject to the law that applies to you, you can ask to:

be told what information we hold about you, and receive a copy;
correct information that is inaccurate, incomplete or out of date;
have information deleted, or stop its use or dissemination;
receive the information you gave us in a structured, commonly used technological format;
withdraw a consent you gave;
in the European Economic Area and the United Kingdom, object to or restrict processing.

Write to the person named in section 1. We may ask you to confirm your identity, and we answer within the time set by the applicable law, in Québec within 30 days.

If you are not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada, or the data protection authority of the country where you live, including in the European Economic Area and the United Kingdom.

10. Cookies and measurement

This website does not use advertising or tracking cookies. How the site is measured, and the few technical items it stores in your browser, are described in the cookie notice.

11. Business audience

This website is meant for businesses; car owners use it only for the warranty of film fitted to their car. It is not directed at minors, and we do not knowingly collect information about them.

12. Other websites

Links to other websites are provided for convenience. Their privacy practices are their own; read their policies before you share information with them.

13. Changes

When we change this policy, we publish the new version here with its date. If a change affects how we use information you have already sent, we will tell you and, where the law requires, ask for your consent again.

Privacy policy